The Key Takeaways
- On April 18, an attacker took 116.500 restaked from the KelpDAO cross-chain Bridge. ETH Worth approximately $292 Million
- More than 13 billion dollars in damages were caused by the breach. DeFi TVL Outflows in 48 Hours, Aave Compound Morpho and 9 Other Protocols.
- Charles Hoskinson claims that Midnight’s zero-knowledgeproofs and multiparty computation can prevent attacks of this kind from recurring.
Hoskinson Explains Cardano Non-Custodial Status Staking Sidesteps Restaking Risk
Charles HoskinsonCardano founder and Ethereum cofounder,, has broken down the attack into a video The Wyoming-based publication guides readers through a website created by artificial intelligence.
“The standard DeFi threat model assumes smart contract bugs are the dominant risk,” Hoskinson is quoted as saying: “That’s not true anymore.”
Then he added:
“Bridges can be very problematic. A one-of-one verifier is not good. Don’t do that. And then the problem is that if they steal the money, DeFi lending is the exit condition. So basically, you can deposit, you can lend, and when you get those tokens, you’re getting tokens unconnected to the theft, and the collateral is poisoned effectively.”
An attacker used a Layerzero spoof message which reached an endpoint contract v2 connected to Kelp Restake The adapter released tokens into an Ethereum escrow. This packet was forged to claim Uni-Chain ID 30320 for its origin. Kelp’s cross-chain setup relied on one decentralized network of verifiers, giving the attacker an easy point to compromise.
These tokens are not being sold on the internet. The decentralized exchange ( DEXThe price would have been smashed by the platforms. The attacker dropped the restaked ETH Using collateral as security in the lending market Aave Before Kelp and its partners were able to freeze their positions, they borrowed liquid-wrapped ether from it. They then walked away with assets that had nothing to do with the initial theft. It was not until the poisoned collateral had been removed from the lending markets that Kelp or its partners were able to freeze their positions.
Llamarisk’s joint incident report, published April 20, confirmed 83,471 ETH Spread of the equivalent across seven attackers wallets for Ethereum core as well as Arbitrum. This report presented two possible resolution scenarios. First, a haircut of 15.12% is applied to all retaked ETH Ethereum Core’s Reserve absorbs roughly $123 Million in bad debt from holders. Second, it isolates the losses in layer 2 ( L2The tokens were repriced to a 26.46% level and generated about $230,000,000 in bad debt, which was concentrated on Mantle Arbitrum and Base. Ethereum’s core, however, remained untouched.
Aave was the only one to see outflows between $6.45 and $8.45 Billion. Wrapped ETH The pools of Arbitrum, Base Mantle Linia and Plasma are nearing 100% utilization. This effectively blocks withdrawals. Nineteen DeFi Compounds, Morphos, Lidos, Ethenas, Pendles, Eulers, Beefys, Lombard Finances, Beefys, Ethenas, Ethenas, Beefys, Lombard Finances, Beefys, Ethenas, Ethenas, Beedles, Eulers, Beefys, and Lombard Finances were all classified as being directly affected.
Three different post-mortems were published by KelpDAO, LayerzeroThen, Llamarisk. None of the parties agree on responsibility. Layerzero said on April 20 it will no longer attest or sign messages for applications running a single-DVN configuration. This is to encourage a migration of the protocol towards multi-verifier settings. Kelp insists that Layerzero’s default configuration ships with single source verification for Ethereum. BNB Chain, Polygons, Arbitrums, and Optimisms, as well as that which allegedly 40% to 50% Layerzero OFT uses the same configuration for all applications.
Onchain forensics suggest connections To the Lazarus Group – a North Korean hacking group that is state sponsored. There has been no formal attribution by an independent firm, nor has the FBI commented.
Hoskinson: ‘If You’re in Cardano Land, You Just Click Delegate … We’re Liquid Non-Custodial’
Hoskinson Bridge inspections were not carried out as required by the law. Smart contract The primary cause of bugs DeFi Threat vector. He said that the 46-minute time span between the first drain and Kelps’ emergency pause is a good indication of how important incident response can be, although it does not outrun the speed with which assets stolen are able to enter the lending markets.
“What makes this novel is the contagion,” Hoskinson explains in this video. “It wasn’t just a bridge hack. It spread to lending, which then created bad debt contagion inside these lending protocols. It created a bank run, and we saw $13 billion of TVL pulled in a very short period of time for a $290 million hack. That’s a crisis of confidence.”
It was framed Cardano‘s lower exposure as a function of its liquid, non-custodial staking design, which removes the need for the staking-to-liquid-staking-to- restaking The wrapper chains that were used to create the Kelp attack surface. Hoskinson claimed that Midnight, Cardano’s privacy-focused sidechainThe core vulnerability is addressed.
Nightstream’s protocol makes it possible to verify forged messages before accepting them. It does this by converting entire chains into proofs which are sent along with messages from other chains. “When people send messages, they can verify that what they’re seeing is correct,” He said. Layerzero can deploy turnkey DVN two-of three or five of seven configurations using Midnight, with minimal operational friction.
Charles Hoskinson compares Bitcoin to Gold and predicts that Bitcoin will reach $500K within 2 years.
Cardano founder Charles Hoskinson envisions a glowing trajectory for bitcoin, predicting the top cryptocurrency could soar to $250,000–$500,000 per coin…
Charles Hoskinson compares Bitcoin to gold and predicts that Bitcoin will reach $500K within 2 years.
Cardano founder Charles Hoskinson envisions a glowing trajectory for bitcoin, predicting the top cryptocurrency could soar to $250,000–$500,000 per coin…
Charles Hoskinson predicts Bitcoin could reach $500K within 2 years, comparing it to gold for the Internet
Cardano founder Charles Hoskinson envisions a glowing trajectory for bitcoin, predicting the top cryptocurrency could soar to $250,000–$500,000 per coin…
At the layer of verification, poisoned message would be blocked by zero-knowledge proofs. Anonymizing the network would make it harder for this type of attack to be executed. The Lazarus Group allegedly had access to AI frontier models through insiders bribed at AI labs. This enabled the Lazarus Group to use AI to find emerging vulnerabilities.
“Hacks are a part of life,” He said “and they’re going to get much, much worse for everyone.”
“This article is not financial advice.”
“Always do your own research before making any type of investment.”
“ItsDailyCrypto is not responsible for any activities you perform outside ItsDailyCrypto.”
Source: news.bitcoin.com
